Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
File: 6ae41674-6179-31e6-b383-75fdb87cda25.roa (raw, json)
Hash identifier: wd+pmIs/kEkbEI3RZZhvfWWj/0msH8rdEByCM9DvARA=
Subject key identifier: 7D:03:0A:99:70:2D:BB:50:8B:32:5D:5F:EC:EC:4C:2F:F9:32:70:EB
Certificate issuer: /CN=9df74e6e-da16-4cba-a854-ee087e767113
Certificate serial: 010D0C9F432858487755DFE8F3A4B20BEC272600
Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 15318
IP address blocks: 198.168.128.0/19 maxlen: 19
198.168.160.0/20 maxlen: 20
198.168.176.0/21 maxlen: 21
198.168.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:df:e8:f3:a4:b2:0b:ec:27:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=9080eed8-23a6-4f60-9993-9455a7fe22b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:08:35:a5:c9:b5:10:7a:93:89:2e:69:f4:
92:bc:80:1a:ef:51:84:e6:6b:f1:02:8e:27:1d:ac:
87:81:4a:57:d4:1c:2b:ed:99:29:2f:ad:4c:80:0b:
ae:41:b1:73:94:d9:09:a8:0d:73:27:07:07:04:e2:
49:cc:2c:df:c3:71:fb:d7:98:f7:4c:fd:64:39:f6:
53:4c:1e:45:ae:c3:7c:44:b4:60:e2:02:9c:55:52:
e0:cd:d3:df:b4:e4:79:19:48:a0:fe:55:c9:f8:b1:
2c:de:8b:72:15:19:e5:3c:05:67:63:19:7d:bd:b4:
b6:ea:79:33:04:fa:8c:89:bd:ae:24:15:67:f1:05:
bd:2a:49:e5:da:1e:b0:85:c2:4e:45:b3:3d:6c:cf:
98:7f:fe:21:0f:33:5b:ae:cd:c9:88:95:99:a5:3c:
c6:ba:61:42:36:d1:b1:c4:db:87:82:82:08:e5:34:
22:9b:22:b4:d9:18:cb:23:9c:0f:ef:06:0b:a4:07:
45:d9:0f:bd:c5:83:43:78:3c:d0:ca:a1:6a:f9:4a:
9a:b0:79:12:e6:36:2d:a3:e5:06:df:81:5f:db:2d:
97:28:a1:4b:26:3e:15:30:78:a8:f2:ba:ca:3c:ef:
3d:9c:d9:e7:4f:d6:9c:27:cb:4a:21:5f:58:6e:12:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:0A:99:70:2D:BB:50:8B:32:5D:5F:EC:EC:4C:2F:F9:32:70:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl
X509v3 Authority Key Identifier:
keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
sbgp-ipAddrBlock: critical
IPv4:
198.168.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a8:0a:71:7b:44:bb:a3:23:17:bd:88:23:7e:04:11:f4:de:
c6:c4:8b:4e:f7:53:26:44:82:92:f5:13:9e:d7:cc:2e:60:90:
ea:01:3f:cb:92:d6:2b:53:9f:04:56:1e:f6:c0:80:86:46:ef:
4b:dd:e8:3d:8e:b2:c6:ac:ce:71:e1:a0:ee:6b:fb:94:cc:ed:
5b:54:c9:6f:39:b8:46:79:f7:90:f1:cd:b2:c6:78:b4:f9:a6:
fb:39:54:bf:a1:2c:28:ea:b3:dd:e0:d6:3c:f6:af:14:6d:2a:
b5:79:5e:14:73:88:8f:93:00:87:f8:13:de:77:ba:0c:da:75:
d9:0e:59:e1:4c:61:07:87:1d:ed:f7:76:58:53:92:29:0c:d5:
f4:fd:86:7b:0a:50:e8:d1:12:d3:59:89:26:21:de:74:ec:10:
05:04:87:25:fd:08:12:9e:5b:f5:4c:00:57:37:47:9d:ea:a6:
98:40:87:c3:54:10:86:2f:47:6f:77:59:3d:84:ac:00:b9:12:
1c:7c:9a:b1:d4:4b:d6:c8:78:e6:f5:b6:ed:5c:90:e6:c6:fc:
20:24:81:6e:01:73:c6:2c:6c:03:2e:19:55:d1:22:13:60:bc:
a7:5b:61:63:d0:57:11:75:60:12:24:57:cf:a4:76:d6:40:3a:
2b:91:19:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3Vd/o86SyC+wnJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRmNzRlNmUtZGExNi00Y2JhLWE4NTQtZWUwODdlNzY3
MTEzMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
OTA4MGVlZDgtMjNhNi00ZjYwLTk5OTMtOTQ1NWE3ZmUyMmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAMINaXJtRB6k4kuafSSvIAa71GE5mvxAo4n
HayHgUpX1Bwr7ZkpL61MgAuuQbFzlNkJqA1zJwcHBOJJzCzfw3H715j3TP1kOfZT
TB5FrsN8RLRg4gKcVVLgzdPftOR5GUig/lXJ+LEs3otyFRnlPAVnYxl9vbS26nkz
BPqMib2uJBVn8QW9Kknl2h6whcJORbM9bM+Yf/4hDzNbrs3JiJWZpTzGumFCNtGx
xNuHgoII5TQimyK02RjLI5wP7wYLpAdF2Q+9xYNDeDzQyqFq+UqasHkS5jYto+UG
34Ff2y2XKKFLJj4VMHio8rrKPO89nNnnT9acJ8tKIV9YbhJMBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0DCplwLbtQizJdX+zsTC/5MnDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZGY3
NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4N2U3NjcxMTMvNmFlNDE2NzQtNjE3OS0z
MWU2LWIzODMtNzVmZGI4N2NkYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWRmNzRlNmUtZGExNi00Y2JhLWE4
NTQtZWUwODdlNzY3MTEzLzlkZjc0ZTZlLWRhMTYtNGNiYS1hODU0LWVlMDg3ZTc2
NzExMy5jcmwwHwYDVR0jBBgwFoAUEq4Uchdx/w2XT9UGiVP+2vDxfRgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85ZGY3NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4
N2U3NjcxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxqiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqoCnF7RLujIxe9iCN+BBH03sbEi073UyZEgpL1E57XzC5gkOoBP8uS
1itTnwRWHvbAgIZG70vd6D2OssasznHhoO5r+5TM7VtUyW85uEZ595DxzbLGeLT5
pvs5VL+hLCjqs93g1jz2rxRtKrV5XhRziI+TAIf4E953ugzaddkOWeFMYQeHHe33
dlhTkikM1fT9hnsKUOjREtNZiSYh3nTsEAUEhyX9CBKeW/VMAFc3R53qpphAh8NU
EIYvR293WT2ErAC5Ehx8mrHUS9bIeOb1tu1ckObG/CAkgW4Bc8YsbAMuGVXRIhNg
vKdbYWPQVxF1YBIkV8+kdtZAOiuRGdY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:54:50 2025 by rpki-client